Community discussions

MUM Europe 2020

Search found 6 matches

by msaxl
Thu Apr 11, 2019 2:53 pm
Forum: General
Topic: vrrp does not join multicast address using igmp
Replies: 0
Views: 392

vrrp does not join multicast address using igmp

I have some CRS3xx series switches with igmp snooping enabled. Two of them are also running as routers and have vrrp enabled. The problem is that they do no see each other and enable both the vrrp interface. /interface bridge mdb p does not include 224.0.0.18. This is why I suspect the vrrp multicas...
by msaxl
Tue Oct 10, 2017 9:08 am
Forum: SwOS
Topic: CRS317 Unknown Ports in Switch VLAN
Replies: 4
Views: 1646

Re: CRS317 Unknown Ports in Switch VLAN

The switch menu seems to be the wrong one on all crs3xx switches. Using ssh or another shell based access the switch menu /interface ethernet switch displays the "simple" switch menu like the switch on ex hAP ac, whereas on the website or winbox the switch menu is the one of the crs2xx series. Since...
by msaxl
Wed Nov 04, 2015 12:22 pm
Forum: General
Topic: IPsec tunnel error with error Ignore because is not listening on ip address (Public Address)
Replies: 5
Views: 1917

Re: IPsec tunnel error with error Ignore because is not listening on ip address (Public Address)

I did hardware resets on an RB750 and 751U, updated to 6.32.3 and changed the 750 to 192.168.90.0/24. I disabled the WAN firewall rules and used Greg's guide for IPsec tunnel from Mikrotik to Mikrotik. The 750 is on my DSL system for its public IP, the 751 is on my cable modem. I can ping 192.168.8...
by msaxl
Thu Oct 22, 2015 12:36 pm
Forum: General
Topic: ipsec xauth mode-config unreliable
Replies: 1
Views: 798

ipsec xauth mode-config unreliable

Hello, I have three mikrotik routers where only one has a public static ip address. Lets call the one with the static ip address A, the others B and C. B and C have both two different internet connections (UMTS and satelite) with dynamic public ip addresses. Using policy based routing I have always ...
by msaxl
Thu Nov 20, 2014 5:09 pm
Forum: General
Topic: IPSec SA and dying status
Replies: 3
Views: 2667

Re: IPSec SA and dying status

Same problem with 6.22 only dying SAs, never seen a mature on. other side is a sonicwall, my side a rb450g (mipsbe) When I tried downgrading to 6.19, the whole ipsec thing did not work (ip ipsec remote-peers hang until I press ctrl-c, so downgrade is broken here) After resetting and another try with...
by msaxl
Fri Oct 03, 2014 9:29 am
Forum: General
Topic: v6.20 released!
Replies: 146
Views: 60167

Re: v6.20 released!

After I upgrade to v6.20 I have the problem that with v6.19 it was possible to set a my-user-fqdn also in psk main mode. I know that this does not make much sense, but if you must connect to a juniper from behind a firewall, the my-id does not match the public ip address and the juniper ipsec does r...